$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft File: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft (raw, json) Hash identifier: LqvPvOBByO2Efcdn7N5Rfm5azUpYtPJZG3TVZL/doi4= Subject key identifier: 69:D1:C9:FF:D6:3B:F0:39:CD:9F:BF:67:13:84:3B:4B:C9:AB:3D:FC Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Certificate serial: 738AF65991614D70D5ED75FC6455A05101EC2BCA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft Manifest number: 0510 Signing time: Wed 03 Sep 2025 20:11:08 +0000 Manifest this update: Wed 03 Sep 2025 20:06:08 +0000 Manifest next update: Sat 06 Sep 2025 22:39:08 +0000 Files and hashes: 1: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (hash: YN/2s31112uMwq4KT5YT8EMIK9P8Spv9BQ+gu6aYN4g=) 2: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (hash: KXtJmDO4hKKtckmp6/OjWqYrbZ7ZmK12D4CTr8FodJE=) 3: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (hash: qZ2majG5cGcPiPcNAPu4jGy/H5NlD9ILAfwhNapK3KI=) 4: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (hash: yzByHbO6Frok5mfNqGJAnbHUvCHTDaMTJ6hmg53mLQI=) 5: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (hash: dn2LxIR2i9f98oBHTTzMm7c0l11yZxH5BdOjGXs/ET8=) 6: 3137352e3131312e3131322e302f32342d3234203d3e203436303236.roa (hash: addoLGX7l1qN9yrFfHEwbDZZ1vggnAx8LkSg4qCXPoA=) 7: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl (hash: dTNMxu6vs8JVEs51kGlZwMwvnse87c45IQ5mPnuRsb8=) 8: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (hash: rEgIPgrk+DS47tvTK2+eEPfHUVseXsnwTUUBVtEyooc=) 9: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (hash: ThbbDvKhsxoAnPUKtdbY/FsPIfXpLzxzoe4gZ4SwG7I=) 10: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (hash: +kWoeqncIsg2yG08LA8FNhnez+6IikrA0zXpF5e1dxk=) 11: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (hash: VSjVNeF6CQhhuIMP9VzYdgPpAyYTICUyURNkkRPZvf0=) 12: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (hash: I9Xm1cEngTYg6WB2t4U5k+twc9OnUGEq5Opc/dfrZDc=) 13: 3137352e3131312e3131372e302f32342d3234203d3e203436303236.roa (hash: PAUNyFLoTuXnyzJaaygCGIoZ2kkR7s3iDrCXWwkOWpM=) 14: 3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (hash: yvTVsKwfMbm9/tZX55oqWjXKQNBRGzzlj+jV8XkeY/A=) 15: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (hash: 6tYZRHS1gp6lxrRLkcMQOZpyzT7UZqMxo9oLwoeh2Kk=) 16: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (hash: X871KmxDisPDxaQpNaNmNV8uKTNCiB9DC630xRuhDpo=) 17: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (hash: lsw9Lj4TdivwiY9urFVLBPCnaQDyjQIHv9L2rFNGJcY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 22:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:8a:f6:59:91:61:4d:70:d5:ed:75:fc:64:55:a0:51:01:ec:2b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Validity Not Before: Sep 3 20:06:08 2025 GMT Not After : Sep 6 22:39:08 2025 GMT Subject: CN=69D1C9FFD63BF039CD9FBF6713843B4BC9AB3DFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d9:21:d9:c3:3b:01:58:d6:93:ce:e7:0b:1e: 3d:5b:6c:05:f2:b9:57:b2:10:df:e8:08:cf:71:df: 03:53:c5:c9:88:95:2b:4f:3d:20:dd:6f:f3:65:4e: 76:63:0d:ba:4e:2f:cd:6f:19:16:c1:52:4f:5d:85: b4:06:07:97:ec:1b:30:87:16:48:d4:5a:8e:94:98: ea:51:11:f3:46:45:af:91:ab:78:ba:cc:5f:c1:f6: 92:2e:97:38:9a:5e:4b:10:0d:94:9a:24:67:aa:34: 93:2c:7f:58:46:16:04:ef:58:c4:07:6a:45:87:e3: e0:7f:f0:dd:af:c6:81:d9:10:ee:e4:cd:c4:e2:a5: e4:a4:6b:e9:ec:cd:5f:c6:65:7a:27:4e:5b:59:3d: 67:85:7a:98:0a:44:fa:b7:c1:d0:ab:8d:62:42:12: 62:a6:4b:b9:26:44:46:36:7a:c2:e3:f1:db:de:30: d7:07:af:9e:98:38:58:e6:1c:8f:aa:b2:12:2e:50: 9c:35:a2:3c:25:c8:74:ae:3d:4d:67:07:8f:88:d2: 8d:4b:10:2e:f2:df:3f:ef:32:b8:9f:85:04:08:69: 2a:85:1e:bf:93:70:97:df:15:bf:6a:c2:8c:36:86: 99:09:9c:08:23:49:84:35:e4:38:05:d0:8e:0e:6c: f5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D1:C9:FF:D6:3B:F0:39:CD:9F:BF:67:13:84:3B:4B:C9:AB:3D:FC X509v3 Authority Key Identifier: keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:95:5d:29:22:c0:e3:ac:75:0f:2f:9a:55:f7:90:5e:69:3a: f1:c8:2e:15:e9:53:38:71:7e:c0:5a:d2:c6:4a:4a:44:51:e1: 23:6c:c6:14:e7:98:e3:9f:61:37:ff:c2:1a:00:b5:77:f6:01: 27:75:42:4f:c6:51:6d:78:20:7b:50:5a:88:48:a2:0b:f0:96: 3a:7c:8c:a4:4d:e6:54:2d:12:41:5e:73:91:70:28:98:13:cd: e8:07:5a:60:52:69:c4:c7:96:9e:f1:44:e2:0c:e4:e5:2b:5a: ee:44:4b:3e:42:8f:54:e1:4e:cb:00:48:3d:b7:ab:c9:67:39: bc:1c:67:28:7d:ca:11:f5:ce:ea:9e:69:46:28:d6:1e:f0:81: 3c:ce:8f:a8:eb:e9:e6:50:17:cc:a4:18:f1:81:46:e9:fd:1a: c2:37:b9:0d:c5:7e:e6:1d:7a:70:a7:09:12:9b:0d:2e:91:1a: d2:f8:f2:86:66:cb:dd:64:72:98:7e:8f:21:f8:be:1f:48:74: 77:9d:7d:e4:27:5b:2a:3e:36:de:bc:39:02:62:73:fb:41:26: 2f:73:3e:b6:ab:f0:f8:7c:70:9b:5d:24:f4:fc:2c:4c:ea:cc: 9f:c6:a0:fa:4b:d3:8b:da:de:72:b5:69:fa:7e:95:8d:f7:51: b1:9a:23:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc4r2WZFhTXDV7XX8ZFWgUQHsK8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4 NDkwM0UxNzAeFw0yNTA5MDMyMDA2MDhaFw0yNTA5MDYyMjM5MDhaMDMxMTAvBgNV BAMTKDY5RDFDOUZGRDYzQkYwMzlDRDlGQkY2NzEzODQzQjRCQzlBQjNERkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp2SHZwzsBWNaTzucLHj1bbAXy uVeyEN/oCM9x3wNTxcmIlStPPSDdb/NlTnZjDbpOL81vGRbBUk9dhbQGB5fsGzCH FkjUWo6UmOpREfNGRa+Rq3i6zF/B9pIulziaXksQDZSaJGeqNJMsf1hGFgTvWMQH akWH4+B/8N2vxoHZEO7kzcTipeSka+nszV/GZXonTltZPWeFepgKRPq3wdCrjWJC EmKmS7kmREY2esLj8dveMNcHr56YOFjmHI+qshIuUJw1ojwlyHSuPU1nB4+I0o1L EC7y3z/vMrifhQQIaSqFHr+TcJffFb9qwow2hpkJnAgjSYQ15DgF0I4ObPWDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUadHJ/9Y78DnNn79nE4Q7S8mrPfwwHwYDVR0j BBgwFoAU+MGaj4yw3chdHI5VY4+0NYSQPhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmY0ZWJjZC0yOWNmLTRlZWMtYTkyYS1kMTEzNmY1Zjk5MzYvMC9GOEMxOUE4RjhD QjBEREM4NUQxQzhFNTU2MzhGQjQzNTg0OTAzRTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4NDkw M0UxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZmNGViY2QtMjljZi00ZWVjLWE5 MmEtZDExMzZmNWY5OTM2LzAvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0 MzU4NDkwM0UxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOVXSkiwOOsdQ8vmlX3kF5pOvHILhXpUzhx fsBa0sZKSkRR4SNsxhTnmOOfYTf/whoAtXf2ASd1Qk/GUW14IHtQWohIogvwljp8 jKRN5lQtEkFec5FwKJgTzegHWmBSacTHlp7xROIM5OUrWu5ESz5Cj1ThTssASD23 q8lnObwcZyh9yhH1zuqeaUYo1h7wgTzOj6jr6eZQF8ykGPGBRun9GsI3uQ3FfuYd enCnCRKbDS6RGtL48oZmy91kcph+jyH4vh9IdHedfeQnWyo+Nt68OQJic/tBJi9z Prar8Ph8cJtdJPT8LEzqzJ/GoPpL04va3nK1afp+lY33UbGaI9E= -----END CERTIFICATE-----Generated at Fri Sep 5 12:41:10 2025 by rpki-client